2026 LACMA — Jul 7–11 2025 network access; employee/customer PII notices (count TBD)
Data compromised
May include name, DOB, SSN, DL/gov ID, limited financial/payment card, health-insurance and limited medical fields (varied by person)
Technical writeup
Verified museum notice plus class-action filing — July 7–11, 2025 intrusion; public notice August 2026. Los Angeles County Museum of Art detected suspicious activity July 11, 2025; investigation found unauthorized network access July 7–11, 2025. Data review identified possible exposure of names, DOB, SSN, driver’s license/government IDs, limited financial/payment-card numbers, health-insurance information, and limited medical fields varying by individual. Former employee Adam Piron filed a California class-action complaint August 26, 2026 (ARTnews), alleging delayed individual notice into 2026 left victims unable to mitigate fraud. No aggregate nationwide census published at indexing — recordsAffected 0; companyConfirmed true.
Root cause
Unauthorized third party accessed a portion of LACMA network Jul 7–11, 2025 (detected Jul 11; investigation Aug 2025; public notice ~Aug 2026)
References
- https://www.bleepingcomputer.com/news/security/lacma-data-breach-last-year-exposed-social-security-and-medical-data/
- https://www.artnews.com/art-news/news/lacma-class-action-lawsuit-data-breach-employee-visitor-info-1234795979/
- https://mynewsla.com/business/2026/08/26/former-lacma-employee-sues-over-recently-announced-data-breach/
- https://www.claimdepot.com/data-breach/lacma-2026